Microsoft Purview Information Protection Scanner

Discover, Classify, and Protect Your On-Premises Data

Deploy Microsoft Purview retention policies and labels with confidence.

Sensitive information doesn’t only live in Microsoft 365. Critical data often remains on file servers and on-premises SharePoint environments, creating security blind spots that increase risk. As organizations adopt Microsoft Copilot and other AI tools, it’s more important than ever to know what sensitive data you have, where it lives, and how it’s protected.

Microsoft Purview Information Protection Scanner extends your existing sensitivity labels and protection policies to on-premises repositories, allowing you to discover, classify, label, and protect data using the same Microsoft Purview policies securing your cloud environment. Mobile Mentor helps you deploy and configure the solution to reduce risk, strengthen compliance, and build a secure foundation for Microsoft Copilot and future AI initiatives.

co-management IT

Why Information Protection Matters

Many businesses still rely on file servers and on-premises SharePoint environments that contain financial records, customer information, intellectual property, and regulated data. Without automated classification and labeling, these repositories become difficult to govern and increase the risk of accidental exposure.

Microsoft Purview Information Protection Scanner extends your existing sensitivity labels and protection policies to these repositories, helping you secure legacy data while maintaining a consistent compliance strategy across cloud and on-premises environments.

With Microsoft Purview Information Protection Scanner, your business can:

  • Automatically discover and classify sensitive information across on-premises file shares and SharePoint Server.

  • Apply Microsoft Purview sensitivity labels and encryption consistently across cloud and on-premises repositories.

  • Reduce compliance and security risk by protecting sensitive data wherever it resides.

A Complete Information Protection Deployment

Discovery, Design, and Deployment

From discovery workshops and repository assessment to scanner architecture, sensitivity label mapping, and technical design, we build a deployment tailored to your environment and compliance requirements.

Fully Configured and Validated Protection

Including scanner installation, repository configuration, scan jobs, pilot testing, production rollout, validation, administrator knowledge transfer, and complete as-built documentation.

Intelligent Classification and Automated Protection

For larger environments, we deploy advanced capabilities including automated labeling, classification tuning, multi-node scanner clusters, phased production rollouts, and policy optimization for enterprise-scale repositories.

Choose the Right Engagement

Every deployment follows the same proven methodology. The difference is simply the size of your on-premises environment and the scale of your Microsoft Purview Information Protection Scanner deployment.

Essentials

Ideal for proof-of-concept deployments

Perfect for businesses with 100–300 users looking to validate Microsoft Purview Information Protection Scanner against a single on-premises repository before expanding.

What’s Included

  • Fixed-price deployment

  • Technical design

  • Scanner installation and configuration

  • Single repository deployment

  • Pilot validation

  • Documentation

  • Knowledge transfer

Standard

Built for growing businesses

Designed for businesses with 300–1,000 users that need to protect multiple file shares or SharePoint Server environments with a full production deployment.

What’s Included

  • Fixed-price deployment

  • Technical design

  • Scanner configuration

  • Multi-repository deployment

  • Pilot and phased production rollout

  • Documentation

  • Knowledge transfer

Enterprise

For complex enterprise environments

Built for businesses with 1,000+ users that require large-scale scanning across multiple repositories with advanced automation and enterprise governance.

Includes everything in Standard, plus:

  • Multi-node scanner clusters

  • Enterprise-scale repository deployment

  • Full sensitivity label taxonomy

  • Advanced automatic classification

  • Multi-wave production rollout

  • Operational runbooks

  • Expanded governance and compliance capabilities

Reduce Your Investment with Microsoft Funding

Many businesses qualify for Microsoft’s CSP Deployment Accelerator funding.

Eligible customers purchasing qualifying Microsoft Defender and Microsoft Purview licensing through CSP may significantly reduce the cost of deployment.

Depending on deployment size, Microsoft funding can offset up to $10,000 in professional services.

We’ll determine your eligibility and manage the entire funding process on your behalf.

Is This Service Right for You? This engagement is ideal if you are:

Looking to discover sensitive information stored on-premises

Extending Microsoft Purview beyond Microsoft 365

Protecting legacy file shares and SharePoint Server

Standardizing sensitivity labels across cloud and on-premises environments

Preparing for regulatory or compliance audits

Reducing the risk of unmanaged sensitive data

Frequently Asked Questions

Microsoft Purview Information Protection Scanner requires Microsoft Purview Information Protection licensing. The exact licensing requirements depend on your Microsoft 365 subscription and the sensitivity labeling capabilities you plan to use. Mobile Mentor will review your licensing during discovery and help ensure you have the appropriate licenses before deployment.

Yes. The Information Protection Scanner supports both discovery mode and automatic labeling. We typically begin with discovery mode to identify sensitive content and validate classification accuracy before enabling automatic labeling and protection in production.

The Information Protection Scanner is designed specifically for on-premises file shares, NAS devices, and SharePoint Server. Microsoft Purview provides native cloud-based auto-labeling for SharePoint Online and OneDrive, allowing organizations to apply a consistent information protection strategy across both cloud and on-premises environments.

Absolutely. Our Standard and Enterprise engagements support deployments across multiple file shares, SharePoint Server farms, NAS devices, and distributed repositories. For larger environments, we can deploy multi-node scanner clusters and execute phased production rollouts to minimize disruption while protecting data at scale.

Learn more about Purview Information Protection Scanner

Whether you’re deploying Microsoft Purview Information Protection Scanner for the first time or expanding an existing information protection strategy, Mobile Mentor helps you discover, classify, and protect sensitive data across your on-premises environment.